BS-10712, add permission api + method to check run rule